$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: rxm3+kmt47NXT1C8pl6Mg+FNDWT7CGKM06tu7/QfQvk= Subject key identifier: 6E:66:D7:53:A2:01:2A:C5:AF:63:0A:D1:29:BF:BE:52:25:CF:C1:A9 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019F91DAF5BD96B2F10B3C01A14EB8F74277 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 19E7 Signing time: Fri 24 Jul 2026 02:01:13 +0000 Manifest this update: Fri 24 Jul 2026 02:01:13 +0000 Manifest next update: Sat 25 Jul 2026 02:01:13 +0000 Files and hashes: 1: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: 167rYr0iHjf5qGKhi/J3b1xGEt9eJylNuuJ3ym9Vb2k=) 2: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=) 3: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=) 4: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=) 5: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=) 6: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=) 7: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=) 8: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=) 9: MAbKsaJixjU16-YxviDdUW3E9O0.roa (hash: G7uQcrymoMNiTSNS0GkaRs7zRkNHWrcTl4RG77CdYN0=) 10: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=) 11: SRWh4DySnbPbtUqnKudLh37LWmk.roa (hash: 3VUWYpD5nskw9fhQcV0TB/lPM9InR0vwQ+h1mvelWpc=) 12: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=) 13: a4e-5HcXuyyRW82YjyXKassrVo8.roa (hash: LjIo0mjkPTCoI0owtR5lNhwGCbcbFzLDlXxT76bUTMg=) 14: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=) 15: wUccj_rDqcMS5f6rHGM1S82tXw8.roa (hash: Am0yB5T/uFMdaWWU3crSox2wHqF23olZ6K+6iaufknI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:da:f5:bd:96:b2:f1:0b:3c:01:a1:4e:b8:f7:42:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jul 24 02:01:13 2026 GMT Not After : Jul 25 02:01:13 2026 GMT Subject: CN=6e66d753a2012ac5af630ad129bfbe5225cfc1a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ed:31:54:96:a8:65:e2:69:0c:5a:65:f9:4f: df:08:1c:64:9b:e4:8a:cc:61:98:e2:79:e7:76:0a: b2:33:cc:32:5c:ae:d8:6c:d5:c2:60:66:fe:02:6d: 81:b6:4d:e4:65:c0:2e:cf:20:0f:ac:a7:80:1e:13: 8e:bb:cb:66:87:3d:f7:9f:ba:c5:00:7d:34:79:6b: 75:5d:6d:2b:c4:b2:95:1d:a8:40:e0:2c:c4:7c:5a: 33:cb:9d:0a:0b:e3:03:fc:f9:b6:88:35:f2:6a:83: 7b:33:fc:d6:24:30:75:6c:a1:3c:ea:a8:78:5f:1c: 0c:e0:ce:1d:a6:f2:5a:d0:ed:0e:b7:37:a6:ca:af: 2e:91:97:81:22:62:96:18:eb:4e:0b:ac:3c:59:5a: 84:8b:6a:40:1e:65:8a:e0:56:bb:cd:36:6c:23:3e: 48:8c:23:ca:84:00:58:79:79:b4:25:24:f9:26:78: 45:7f:26:8c:d5:6b:88:9a:ad:76:f4:8e:43:c8:a5: 50:22:25:bd:4c:8b:84:17:d0:92:63:f4:aa:8d:1d: a7:08:55:78:99:95:66:87:e1:0b:af:fb:36:09:b1: 53:ad:b6:b5:2c:bf:91:fa:d1:b5:1e:39:85:bb:27: d9:93:32:50:1d:2c:f6:41:06:e3:16:6f:0c:63:40: 74:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:66:D7:53:A2:01:2A:C5:AF:63:0A:D1:29:BF:BE:52:25:CF:C1:A9 X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8f:9d:bb:89:32:8c:c4:5f:43:63:f5:25:62:79:e2:a2:41: c1:e1:aa:30:e2:d5:94:43:6a:17:c3:8f:2a:69:72:57:ae:a7: 86:2a:fe:73:94:f2:b7:b5:a7:31:28:65:53:09:94:4d:38:90: e4:cf:b6:08:41:2b:4e:2a:8f:cc:6d:7c:54:ab:9f:d8:e3:a0: 3a:75:96:41:1e:57:b0:10:5e:d4:3e:ae:97:1d:d4:5c:5e:88: 50:d3:09:e3:31:56:d1:d1:2a:ba:f4:75:0d:8a:e4:01:07:73: c8:b5:e4:a8:6c:c3:9a:b3:59:58:69:d5:2f:bc:c8:a6:68:50: 2a:97:32:ea:77:0a:4a:8f:6c:76:62:d6:c2:f1:e6:86:68:8e: 89:08:2c:93:4f:f1:01:d5:7e:6c:12:cd:6f:8d:f8:e8:e6:f8: 46:8b:c0:8e:50:21:2d:89:4c:e1:f3:fd:f0:10:94:d2:7c:e0: e9:a4:80:e6:5c:54:58:b0:c0:e0:ed:35:28:96:0f:70:d2:52: e7:62:bd:e2:d7:5a:c2:0f:6c:74:7b:6e:37:2f:dd:3b:23:ed: 5e:e2:c4:ac:5c:83:96:55:03:8c:ef:7e:a3:09:42:7f:cd:90: ce:75:84:6f:a9:dc:3d:b3:94:e4:5a:40:3c:47:79:13:b0:71: cf:da:2d:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+R2vW9lrLxCzwBoU6490J3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwNzI0MDIwMTEzWhcNMjYwNzI1MDIwMTEzWjAzMTEwLwYDVQQD Eyg2ZTY2ZDc1M2EyMDEyYWM1YWY2MzBhZDEyOWJmYmU1MjI1Y2ZjMWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzO0xVJaoZeJpDFpl+U/fCBxkm+SK zGGY4nnndgqyM8wyXK7YbNXCYGb+Am2Btk3kZcAuzyAPrKeAHhOOu8tmhz33n7rF AH00eWt1XW0rxLKVHahA4CzEfFozy50KC+MD/Pm2iDXyaoN7M/zWJDB1bKE86qh4 XxwM4M4dpvJa0O0Otzemyq8ukZeBImKWGOtOC6w8WVqEi2pAHmWK4Fa7zTZsIz5I jCPKhABYeXm0JST5JnhFfyaM1WuImq129I5DyKVQIiW9TIuEF9CSY/SqjR2nCFV4 mZVmh+ELr/s2CbFTrba1LL+R+tG1HjmFuyfZkzJQHSz2QQbjFm8MY0B0zwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5m11OiASrFr2MK0Sm/vlIlz8GpMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4+du4ky jMRfQ2P1JWJ54qJBweGqMOLVlENqF8OPKmlyV66nhir+c5Tyt7WnMShlUwmUTTiQ 5M+2CEErTiqPzG18VKuf2OOgOnWWQR5XsBBe1D6ulx3UXF6IUNMJ4zFW0dEquvR1 DYrkAQdzyLXkqGzDmrNZWGnVL7zIpmhQKpcy6ncKSo9sdmLWwvHmhmiOiQgsk0/x AdV+bBLNb4346Ob4RovAjlAhLYlM4fP98BCU0nzg6aSA5lxUWLDA4O01KJYPcNJS 52K94tdawg9sdHtuNy/dOyPtXuLErFyDllUDjO9+owlCf82QznWEb6ncPbOU5FpA PEd5E7Bxz9otIQ== -----END CERTIFICATE-----Generated at Fri Jul 24 10:09:02 2026 by rpki-client